Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/AyYiLnrYjuH-IZrnHWJ1wMqGZt8.roa
File: AyYiLnrYjuH-IZrnHWJ1wMqGZt8.roa (raw, json)
Hash identifier: YQyuPL00gcL5IPsst/x6Vps9GgGSLooIwzYiWdTOYFQ=
Subject key identifier: 03:26:22:2E:7A:D8:8E:E1:FE:21:9A:E7:1D:62:75:C0:CA:86:66:DF
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018281477AFD8AC910DDD6F752385BD50296
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/AyYiLnrYjuH-IZrnHWJ1wMqGZt8.roa
Signing time: Tue 09 Aug 2022 06:25:21 +0000
ROA not before: Tue 09 Aug 2022 06:25:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 87.248.134.0/24 maxlen: 24
87.248.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:47:7a:fd:8a:c9:10:dd:d6:f7:52:38:5b:d5:02:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Aug 9 06:25:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0326222e7ad88ee1fe219ae71d6275c0ca8666df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a9:4d:9f:20:9e:47:3b:2f:8f:f2:4f:3b:4a:
ef:19:37:51:7f:9f:0f:c3:31:ab:07:15:45:3f:3d:
03:0a:b4:57:05:e3:79:d5:82:24:bf:b5:46:2c:80:
23:f3:05:e0:3b:50:4e:4e:56:f2:f1:94:39:88:2f:
a6:eb:47:7a:7a:2a:4f:41:ad:c5:61:4e:8c:c7:50:
11:11:54:c8:55:77:8f:00:3c:f5:c9:bc:17:5a:75:
c6:39:b2:eb:ab:06:00:24:51:c3:1b:b1:ba:39:5f:
3a:86:ae:7f:83:3a:58:a0:4d:ad:4b:53:e4:29:47:
27:d1:62:ef:69:b0:2c:93:2d:b7:05:cc:ae:23:c1:
78:23:0d:f7:a9:0f:8f:b5:79:e5:52:af:87:da:53:
90:dd:c4:b4:03:63:9b:32:f4:e3:d0:84:e3:7a:19:
b8:6a:d8:1b:c6:bd:38:4c:0b:95:fa:24:f9:57:f5:
49:26:94:36:4c:d8:b4:57:04:ea:f9:6b:52:2e:ec:
93:ec:76:5e:d1:11:97:28:7f:9c:e2:9b:61:40:81:
60:71:ac:3e:10:12:68:89:5f:a4:77:0a:a9:51:10:
a7:0b:3d:7f:73:de:dc:ab:ac:e1:8f:0f:7a:64:e1:
98:cd:d7:ed:31:65:82:b3:73:51:7d:81:23:ca:81:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:26:22:2E:7A:D8:8E:E1:FE:21:9A:E7:1D:62:75:C0:CA:86:66:DF
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/AyYiLnrYjuH-IZrnHWJ1wMqGZt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.134.0/24
87.248.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:52:b5:30:6a:89:ba:26:82:63:06:ec:c4:3d:43:41:04:20:
ea:94:f1:bc:f2:f5:30:1b:83:06:9d:3d:7e:45:08:ca:33:41:
54:5d:71:98:97:06:6c:21:8a:d1:17:b1:0f:7b:fc:9c:cc:83:
60:e4:55:7a:4b:f5:8c:11:b4:b7:73:46:87:ef:38:8d:6b:65:
1d:c7:e7:b9:88:76:ac:12:8f:e4:89:55:84:71:44:4d:f4:0c:
94:03:f3:34:4c:68:79:7f:6f:fd:04:40:d9:57:6e:01:db:f7:
62:8b:a2:19:25:c4:24:c8:47:85:d7:f4:39:d0:cc:19:3c:20:
ed:43:cc:85:f1:8b:25:53:e9:19:76:37:cd:60:b0:b4:e1:49:
f3:26:07:0e:7d:5f:44:a7:7a:af:f8:b8:c2:ad:a0:bd:8c:e9:
af:38:48:46:fc:6f:db:b0:25:18:9e:f1:76:80:5f:fc:ed:2f:
8d:45:3c:73:e8:49:91:3d:5f:66:2d:82:0c:53:b9:11:69:d4:
8f:85:c6:5c:83:de:2a:45:22:0b:9f:54:c8:4d:25:86:50:cf:
a0:3b:46:09:73:40:f2:96:40:d8:b9:23:a6:de:24:b9:20:87:
c2:41:4b:15:bd:40:39:85:1b:76:ee:b8:7e:f9:cc:39:15:ec:
48:97:69:22
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYKBR3r9iskQ3db3Ujhb1QKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjIwODA5MDYyNTIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzI2MjIyZTdhZDg4ZWUxZmUyMTlhZTcxZDYyNzVjMGNhODY2NmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6lNnyCeRzsvj/JPO0rvGTdRf58P
wzGrBxVFPz0DCrRXBeN51YIkv7VGLIAj8wXgO1BOTlby8ZQ5iC+m60d6eipPQa3F
YU6Mx1AREVTIVXePADz1ybwXWnXGObLrqwYAJFHDG7G6OV86hq5/gzpYoE2tS1Pk
KUcn0WLvabAsky23BcyuI8F4Iw33qQ+PtXnlUq+H2lOQ3cS0A2ObMvTj0ITjehm4
atgbxr04TAuV+iT5V/VJJpQ2TNi0VwTq+WtSLuyT7HZe0RGXKH+c4pthQIFgcaw+
EBJoiV+kdwqpURCnCz1/c97cq6zhjw96ZOGYzdftMWWCs3NRfYEjyoFtUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAMmIi562I7h/iGa5x1idcDKhmbfMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvQXlZaUxucllqdUgtSVpybkhXSjF3TXFHWnQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iGAwQA
V/iPMA0GCSqGSIb3DQEBCwUAA4IBAQCkUrUwaom6JoJjBuzEPUNBBCDqlPG88vUw
G4MGnT1+RQjKM0FUXXGYlwZsIYrRF7EPe/yczINg5FV6S/WMEbS3c0aH7ziNa2Ud
x+e5iHasEo/kiVWEcURN9AyUA/M0TGh5f2/9BEDZV24B2/dii6IZJcQkyEeF1/Q5
0MwZPCDtQ8yF8YslU+kZdjfNYLC04UnzJgcOfV9Ep3qv+LjCraC9jOmvOEhG/G/b
sCUYnvF2gF/87S+NRTxz6EmRPV9mLYIMU7kRadSPhcZcg94qRSILn1TITSWGUM+g
O0YJc0DylkDYuSOm3iS5IIfCQUsVvUA5hRt27rh++cw5FexIl2ki
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org